Facebook failed to warn users of known risks before 2018 breach: court filing